Simplify IT. With Cisco Application Centric Infrastructure. Roberto Barrera VERSION May, 2015

Transcription

1 Simplify IT With Cisco Application Centric Infrastructure Roberto Barrera VERSION May, 2015

2 Content Understanding Software Definded Network (SDN) Why SDN? What is SDN and Its Benefits? Understanding OpenFlow What is OpenFlow SDN vs OpenFlow SDN Ecosystem SDN Vendors VERSION May, 2015

3 VERSION May, 2015 Why SDN?

4 Decoupling the system that makes decision about where traffic is sent (the control plane) from the underlying systems that forwards traffic to the selected destination (the data plane) What is SDN? Benefits Centralization of Control of the Network via eparation of Control Logic to Off Device Compute that enables automation and orchestration of network services via Open Programatting Interfaces. Efficiency: Optimaze existing application, services and Infrastructure. Scale: rapidly grow existing applications and services. Innovation: Create and deliver new types of applications and services and business models. VERSION May, 2015

5 What is OpenFlow OpenFlow is a standars based protocol allowing for a centralized control plane in a separate divice (the controller) Provides hardware abstraction Is managed by the Open Networking Foundation (ONF) Is asynchronous. VERSION May, 2015

6 SDN vs OpenFlow Application Layer Business Application API API API Control Layer Network Services Network Services Network Services Infraestructure Layer VERSION May, 2015

7 SDN vs OpenFlow SDN is not a Technology, it is a architecture There is nothing that can be implemented using SDN and not with traditional networks While SDN is a architecture, OpenFlow is a Protocol that enables deployment and implementation of it VERSION May, 2015

8 VERSION May, 2015 Some SDN Vendors

9 AGENDA Challenges and Opportunities Application Centric Infrastructure and Business Benefits What problem are we trying to solve and how do we solve it Open, Open and Open Summary and Q&A Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

10 ACI Addresses Business Objectives Best Customer Service Product and Service Innovation IT as a Competitive Advantage Increased Business Insight Accelerated Application Delivery Flexible Infrastructure Greater Visibility and Analytics Simplified Processes Compliance and Governance Auditing and Forensics Integration Security Intelligence Alignment with Business Objectives CEO CIO CISO ACI Benefits Competitive Advantage 2014 Cisco and/or its affiliates. All rights reserved. Business Agility Lower TCO Reduced Risk Cisco Confidential 10

11 IT Challenges and Opportunities Better alignment of IT with rapidly changing business needs requires dynamic and automated policy-based control of DC and Cloud infrastructure. Technology Transitions CIOs need a model that balances agility & risk. Public Cloud Offerings Brings new and different security and operational challenges/opportunities. IT Processes Policy semantics impede alignment of IT with business Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11

12 Introducing: Application Centric Infrastructure Apps + Infrastructure Open + Secure Physical + Virtual On-Premises + Cloud Application Oriented Policy = Operational Simplicity 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12

13 Application Centric Infrastructure Customer Business Benefits Deploy applications faster Workload mobility Higher application availability Compliant and secure CapEx reduction Single open API for entire system Network Service Appliances H Y P E R V I S O R X86 Multi-Hypervisor H Y P E R V I S O R H Y P E R V I S O R Customer Operational Benefits Application Centric Infrastructure East-West optimized for all workloads Risk mitigation Better utilization of resources Operational efficient / zero touch deployment and de-commissioning Self documenting network Simplified day-2 troubleshooting OpEx reduction X86-Virtual Machines & Virtual Appliances X86 Servers Unix Systems P and Z systems IP Storage 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13

14 ACI: Business Outcome and Benefits for Cisco IT Cisco ACI is an open, future-proofed data center architecture that can continue to grow as we enhance client services. Chuck Crane Network and Security Architect, Axciom (Transitioning from AWS to Private Cloud) Cisco s open standards approach makes ACI even stronger. We conducted testing on ACI it fully delivered everything we expected, and proved to be quite stable and mature. Nik Weidenbacher Principal Engineer, SunGard This will enable Telstra to deliver service agility, security and performance that our customers expect from an enterprise grade cloud. Erez Yarkoni Executive Director, Telstra Greater Business Agility Lower Capital Expenses Reduced Costs/ Complexity Lower Operating Cost Resource Optimization 58 % Reduce Network Provisioning 25 % CAPEX Reduction 21 % Reduce Management Costs 45 % Reduce Power and Cooling Costs % Compute and Storage Optimization Cisco and/or its affiliates. All rights reserved. Source: Cisco IT Cisco Confidential 14

15 ACI Addresses the Security Challenge in the DC Security Expressed in Application Language Simplified Policybased Segmentation Network Services Automation, Open Eco- System Visibility, Analytics, Forensics Automate Compliance, Centralized Audit Centralized Security Across Physical and Virtual Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15

16 Investment Protection Extending ACI into the existing infrastructure Extend ACI Model on existing IP networks, L4-7 Services, Hypervisors Existing Nexus networks PROFILE ACI Fabric AVS Extended ACI POLICY Bare Metal AVS Hypervisors VM s Bare Metal Hypervisor VMs Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

17 ACI is evolving the network infrastructure to be an enabler for faster application deployment Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

18 Two Types of Languages Infrastructure Language App Language VLAN IP Address Subnets Firewalls Quality of Service Load Balancer Access Lists Human Translator Application Tier Policy and Dependencies Security Requirements Service Level Agreement Application Performance Compliance Geo Dependencies Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

19 Data Center Automation Manual versus Policy Driven Architect it Design it Procure it Install it Configure it Secure it QA it Is it ready? Architect it Design it ACI Policy Driven Is procured Is installed Is configured Is secured Is QA d It is ready Service Request ARCHITECT DESIGN COMPUTE 2014 Cisco and/or its affiliates. All rights reserved. Application SERVICES SECURITY NETWORK Available Application Available Cisco Confidential 19

20 Data Center Automation and IT Collaboration Today: Serialized Configuration and Management MANUAL PROCESS LEADS TO INCREASED DEPLOYMENT TIMES Application Requirements COMPUTE SERVICES NETWORK SECURITY Successful Deployment Deployment Trigger Configuration Mismatch Policy Violation Service Request ARCHITECT DESIGN COMPUTE 2014 Cisco and/or its affiliates. All rights reserved. SERVICES SECURITY NETWORK Application Available Cisco Confidential 20

21 Data Center Automation and IT Collaboration ACI: Common Policy Framework and Operational Model POLICY-BASED AUTOMATION Deployment Trigger STORAGE SECURITY Application Requirements COMPUTE Application Policy NETWORK Defined set of application requirements APPLICATION CLOUD Team builds application policy and template Operations team deploys with minimal risk and maximum speed Service Request ARCHITECT 2014 Cisco and/or its affiliates. All rights reserved. DESIGN Application Available Cisco Confidential 21

22 A new common language to describe desired state is needed Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

23 An Innovative Approach to Policy Provided Contract Provided Contract Provided Contract OUTSIDE F/W ADC WEB ADC APP DB What is an application policy? Group: A set of virtual or physical workloads with the same policy Contracts: A set of rules governing communication between groups Service Chains: A set of network services between groups Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

24 Policy is Business Relevant Application Centric Infrastructure (ACI) allows the entire infrastructure to take commands in a business-relevant language. ACI Policy Aligned with Applications Traditional Policy Aligned with.? Let my app servers talk to my web servers. 1. Figure out where app lives in physical net 2. Trunk VLAN 112 to switch Add route. 4. Plumb ports Configure ACL 6. Apply QoS Cisco and/or its affiliates. All rights reserved. 7. Repeat every time app moves or needs more capacity Cisco Confidential 24

25 The Benefits of an Application Centric Policy Application Workload Mobility Health Score TENANT APPLICATION Health Score Systems Telemetry 0 Packets dropped 25 Packets dropped Systems Telemetry Latency Latency Isolation Isolation CONSISTENT VISIBILITY ACROSS CLOUD AND DC Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

26 Simplify IT Combining Public and Private Cloud Enterprise Cloud APIC Provider Cloud F/W WE AP ADC L/B WEB ADC L/B APP DB B P InterCloud Secure Connection WE F/W ADC L/B WEB ADC L/B F/W B WE ADC L/B WEB ADC L/B F/W B WE ADC L/B WEB ADC L/B B AP APP P AP APP P AP APP P Consistent ACI Policy Across Public and Private Clouds Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26

27 Open Open Source, Open Standards, Open Interfaces 2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27

28 Opening the ACI Policy with OpFlex OPFLEX PROTOCOL + ECOSYSTEM APIC OPEN SOURCE Open source implementation available to anyone OPFLEX STANDARD Upcoming OpFlex standard through IETF L4-7 DEVICE HYPERVISOR SWITCH ECOSYSTEM Broad, growing vendor support including hypervisor, network, and L Cisco and/or its affiliates. All rights reserved. DELIVERING INVESTMENT PROTECTION BY ALLOWING ANY DEVICE TO INTEGRATE WITH CISCO ACI Cisco Confidential 28

29 Open: APIC Programming Interfaces Automation Hypervisor Management OVM Enterprise Monitoring Systems Manageme nt Orchestration Frameworks Open REST APIs Support Integration With Any Software Applications NORTHBOUND PROGRAMMABILITY LAYER APIC OpFlex: Open Fabric Attached Device API Supports Integration with Any Network Device SOUTHBOUND PROGRAMMABILITY LAYER Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29

30 The ACI Fabric HYPERVISOR HYPERVISOR HYPERVISOR Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30

31 Open and Secure from the Ground Up OPEN SOURCE WITH ADVANCED SECURITY Policy OPEN STANDARDS NSH VXLAN OpFlex + RBAC Encryption Auditing Tenant Isolation OPEN INTERFACES JSON XML REST OpFlex Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

32 Summary: Our Direction Data centers and cloud network infrastructures, both physical and virtual, will no longer be configured, will not be software defined (or programmed), but instead will be Policy Driven and Application Centric Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32

33 Thank you.

34 Open and Secure from the Ground Up OPEN SOURCE WITH ADVANCED SECURITY Policy OPEN STANDARDS NSH VXLAN OpFlex + RBAC Encryption Auditing Tenant Isolation OPEN INTERFACES JSON XML REST OpFlex Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34